Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/zB_eI0R_E9fHHHjTeKsfbCfUNfE.roa
File: zB_eI0R_E9fHHHjTeKsfbCfUNfE.roa (raw, json)
Hash identifier: ojS7UDvnpbti0L0m+Z7X9vfIKPOWqVpCsWT632+KxOg=
Subject key identifier: CC:1F:DE:23:44:7F:13:D7:C7:1C:78:D3:78:AB:1F:6C:27:D4:35:F1
Certificate issuer: /CN=13ec4731f102c30cc13e2fb5a7f9758cea963452
Certificate serial: 019422201D43475492BE03092B29D60C52C8
Authority key identifier: 13:EC:47:31:F1:02:C3:0C:C1:3E:2F:B5:A7:F9:75:8C:EA:96:34:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-xHMfECwwzBPi-1p_l1jOqWNFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/zB_eI0R_E9fHHHjTeKsfbCfUNfE.roa
Signing time: Wed 01 Jan 2025 13:48:37 +0000
ROA not before: Wed 01 Jan 2025 13:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44820
IP address blocks: 91.194.40.0/23 maxlen: 23
91.203.4.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:1d:43:47:54:92:be:03:09:2b:29:d6:0c:52:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ec4731f102c30cc13e2fb5a7f9758cea963452
Validity
Not Before: Jan 1 13:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc1fde23447f13d7c71c78d378ab1f6c27d435f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:0c:1f:11:61:f7:bb:ae:48:dc:64:29:6c:99:
ab:88:5c:98:c1:7d:bc:24:06:e8:41:12:ee:1e:28:
9a:e0:26:3d:ab:52:02:ae:9b:bc:f9:00:aa:1a:ea:
c4:71:a7:4e:38:54:a8:1b:10:41:b6:d1:16:df:e1:
ff:a6:93:8d:19:28:d3:27:65:a5:21:96:04:1f:a9:
b9:ee:48:50:d4:e2:20:07:08:a7:6d:ea:7c:23:16:
12:58:41:86:fc:e6:e2:cc:13:11:a5:69:52:bc:45:
04:cd:81:9c:c9:01:62:3e:a7:45:52:91:de:48:5f:
3b:4c:ce:06:d1:00:7f:ad:35:8c:55:fb:0e:39:3a:
e3:79:9c:02:38:91:37:01:14:18:c1:23:f0:a6:39:
6c:a3:2c:6f:3e:f8:c5:d6:09:a1:68:a0:2f:9a:4d:
32:3d:dd:a1:4f:d1:7e:9a:08:c4:86:9d:65:bb:f1:
1e:76:94:9d:0e:8f:b1:f6:0d:0f:00:3f:48:b5:40:
7c:62:34:9f:89:09:05:5f:af:a2:76:b8:0f:dd:e5:
e2:85:96:3e:7a:b6:ec:de:f0:49:a7:2f:80:d4:f0:
98:5b:5d:72:67:f2:d7:4d:1c:b6:3b:d3:01:ff:3b:
80:5a:39:eb:52:50:b6:a8:f1:09:b6:94:ae:3c:4e:
90:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:1F:DE:23:44:7F:13:D7:C7:1C:78:D3:78:AB:1F:6C:27:D4:35:F1
X509v3 Authority Key Identifier:
keyid:13:EC:47:31:F1:02:C3:0C:C1:3E:2F:B5:A7:F9:75:8C:EA:96:34:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-xHMfECwwzBPi-1p_l1jOqWNFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/zB_eI0R_E9fHHHjTeKsfbCfUNfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.40.0/23
91.203.4.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:f4:48:8e:70:06:76:14:2c:c2:a4:f1:b1:19:d2:98:6e:f1:
d2:f7:31:7d:26:51:e6:99:46:8b:22:65:81:26:1d:6a:3a:8b:
7e:15:fd:c7:96:2c:b7:f8:6b:54:06:d0:56:38:2a:74:b0:bb:
61:da:77:24:92:9d:72:5d:14:d3:bf:af:c3:52:3b:ff:97:21:
cb:f9:aa:43:67:da:cc:53:c2:83:9d:cd:9d:1f:65:47:d5:85:
6e:5f:6e:ab:fc:f9:74:33:63:18:16:54:07:5d:16:f3:43:78:
e1:ab:e3:72:cb:48:33:70:7e:47:12:da:aa:5b:61:23:10:e3:
ef:74:24:3d:25:b0:9d:79:83:3e:81:60:cb:e6:df:25:37:78:
60:e1:fe:6d:dd:b7:31:b5:f2:d1:af:ba:53:30:be:be:d6:2c:
d7:5e:0e:03:0c:34:97:87:92:88:ae:d7:4d:a1:7e:43:7c:c0:
3f:e0:eb:88:82:6a:4f:ab:ee:3e:05:8a:20:5d:56:12:69:95:
61:bb:86:5d:bc:9a:b5:3e:fe:7f:3c:eb:23:5b:9a:da:08:cf:
2b:19:83:4b:92:e4:c1:c3:45:99:a3:38:2b:13:97:f1:f6:34:
0d:e7:d7:60:f8:6d:60:71:bc:16:25:65:50:b0:5f:5f:4c:06:
e8:1a:da:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:56 2025 by rpki-client on console.sobornost.net